$ rpki-client -vvf rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/24CB4F36957811EEA7BF2753C4F9AE02.roa File: 24CB4F36957811EEA7BF2753C4F9AE02.roa (raw, json) Hash identifier: vnKzhVFNY+FGMfJ4nAYQTRJIbfe3YW7Q9b/J3/3TLKQ= Subject key identifier: FA:06:E9:53:C2:7D:91:D7:9B:94:8D:FA:36:BE:2A:1D:90:49:0C:0A Certificate issuer: /CN=A9182FD0/serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Certificate serial: 01F5 Authority key identifier: 7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/24CB4F36957811EEA7BF2753C4F9AE02.roa Signing time: Fri 03 Jul 2026 04:30:53 +0000 ROA not before: Fri 03 Jul 2026 04:30:53 +0000 ROA not after: Thu 30 Sep 2027 00:00:00 +0000 asID: 135606 IP address blocks: 103.68.58.0/24 maxlen: 24 103.68.59.0/24 maxlen: 24 2407:d80::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 04:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 501 (0x1f5) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9182FD0, serialNumber=7A5C4DD0A3BB9CD814B2174AF693E3F7414B995B Validity Not Before: Jul 3 04:30:53 2026 GMT Not After : Sep 30 00:00:00 2027 GMT Subject: CN=6a473afd-d72d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:89:2a:b0:e0:b9:1e:ee:66:ae:89:d4:3f:29: ce:5e:ef:bd:30:ba:9d:c5:5b:eb:f6:d2:e2:88:01: b1:0c:4a:4d:b1:e3:69:36:9e:3c:f9:7d:0a:85:69: 90:99:27:8d:35:48:9e:12:36:9e:e9:58:3c:93:ac: e2:0a:cb:3d:56:45:c4:a6:77:07:e1:8e:60:04:eb: 5d:f6:7f:4a:39:d4:32:8f:39:54:18:cd:d9:db:ed: 53:68:39:50:a1:f9:8e:09:90:a1:dc:e6:71:da:2e: d5:d8:e5:4b:05:bd:e1:07:01:3a:f4:0d:59:c4:46: df:03:0e:3b:97:ab:48:b8:a8:87:3d:48:66:b1:51: 45:78:c0:c1:50:d0:71:b0:0f:d0:5c:45:a5:d1:2a: 79:7b:f5:06:94:77:e9:56:07:c8:fb:87:16:cc:2f: 25:5b:ad:04:94:65:a2:19:d4:ba:e1:15:83:37:19: 56:15:00:40:3f:25:3f:6e:23:27:2f:15:10:d8:a7: 0e:7d:96:16:77:d4:30:36:a4:ec:9c:c2:99:83:62: 5b:3c:d4:08:3a:3a:7a:4c:b2:57:4c:5e:50:f5:9a: 61:45:38:3f:15:20:5b:35:67:6e:4a:fe:ac:60:c4: 86:ea:14:2b:9c:dd:d9:cd:95:d5:c4:7c:74:ba:6e: 19:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:06:E9:53:C2:7D:91:D7:9B:94:8D:FA:36:BE:2A:1D:90:49:0C:0A X509v3 Authority Key Identifier: keyid:7A:5C:4D:D0:A3:BB:9C:D8:14:B2:17:4A:F6:93:E3:F7:41:4B:99:5B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/elxN0KO7nNgUshdK9pPj90FLmVs.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/elxN0KO7nNgUshdK9pPj90FLmVs.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9182FD0/2C9AA31C957611EE82EFCB1CC4F9AE02/24CB4F36957811EEA7BF2753C4F9AE02.roa sbgp-ipAddrBlock: critical IPv4: 103.68.58.0/23 IPv6: 2407:d80::/32 Signature Algorithm: sha256WithRSAEncryption 56:b2:16:b9:d0:82:72:9e:51:58:07:67:aa:70:1c:ae:7c:f1: 48:8a:3a:6d:5e:03:c2:bd:4e:e9:c4:d3:76:d3:22:0e:6a:0b: 25:80:cf:8b:80:d9:36:9c:c7:4b:f4:0e:48:b7:de:b6:a4:2a: eb:f7:8b:22:0f:84:a4:74:50:a7:bd:df:b6:44:23:f5:ce:a5: 1f:4a:c0:a7:6d:a6:c0:d9:e8:e0:ca:35:88:0a:08:e1:d9:04: 70:f5:ab:8d:e0:6b:d7:3d:cf:ec:20:5f:c0:92:cf:9e:56:2b: bd:f4:a7:8c:f5:8e:57:a3:cd:25:44:a8:46:c7:da:f8:04:13: fd:36:74:76:fb:a9:09:83:80:71:26:88:25:9d:e5:47:c3:9b: 5e:b6:98:c5:a4:72:21:6a:72:9f:f8:08:26:f9:bc:1d:97:84: df:3d:0b:7c:9e:37:c8:f4:73:9a:c4:98:10:6a:4d:3b:c3:47: 8d:a3:de:6e:83:1e:08:a9:ed:ac:3b:48:a2:28:03:b6:12:a2: 1c:8e:c6:10:36:8c:e8:dd:30:b1:33:d9:d7:94:0a:75:6a:75: 3b:8c:55:f7:f1:60:cb:d3:72:26:ba:ea:96:e5:7e:25:6b:01: 8f:38:de:49:b3:1f:58:a1:f0:e4:06:0f:6c:85:87:65:7d:84: 75:88:1d:d2 -----BEGIN CERTIFICATE----- MIIFSzCCBDOgAwIBAgICAfUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx ODJGRDAxMTAvBgNVBAUTKDdBNUM0REQwQTNCQjlDRDgxNEIyMTc0QUY2OTNFM0Y3 NDE0Qjk5NUIwHhcNMjYwNzAzMDQzMDUzWhcNMjcwOTMwMDAwMDAwWjAYMRYwFAYD VQQDEw02YTQ3M2FmZC1kNzJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsIkqsOC5Hu5mronUPynOXu+9MLqdxVvr9tLiiAGxDEpNseNpNp48+X0KhWmQ mSeNNUieEjae6Vg8k6ziCss9VkXEpncH4Y5gBOtd9n9KOdQyjzlUGM3Z2+1TaDlQ ofmOCZCh3OZx2i7V2OVLBb3hBwE69A1ZxEbfAw47l6tIuKiHPUhmsVFFeMDBUNBx sA/QXEWl0Sp5e/UGlHfpVgfI+4cWzC8lW60ElGWiGdS64RWDNxlWFQBAPyU/biMn LxUQ2KcOfZYWd9QwNqTsnMKZg2JbPNQIOjp6TLJXTF5Q9ZphRTg/FSBbNWduSv6s YMSG6hQrnN3ZzZXVxHx0um4ZIQIDAQABo4ICbzCCAmswHQYDVR0OBBYEFPoG6VPC fZHXm5SN+ja+Kh2QSQwKMB8GA1UdIwQYMBaAFHpcTdCju5zYFLIXSvaT4/dBS5lb MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4MkZEMC8yQzlBQTMxQzk1 NzYxMUVFODJFRkNCMUNDNEY5QUUwMi9lbHhOMEtPN25OZ1VzaGRLOXBQajkwRkxt VnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2VseE4wS083bk5nVXNoZEs5cFBqOTBGTG1Wcy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx ODJGRDAvMkM5QUEzMUM5NTc2MTFFRTgyRUZDQjFDQzRGOUFFMDIvMjRDQjRGMzY5 NTc4MTFFRUE3QkYyNzUzQzRGOUFFMDIucm9hMC4GCCsGAQUFBwEHAQH/BB8wHTAM BAIAATAGAwQBZ0Q6MA0EAgACMAcDBQAkBw2AMA0GCSqGSIb3DQEBCwUAA4IBAQBW sha50IJynlFYB2eqcByufPFIijptXgPCvU7pxNN20yIOagslgM+LgNk2nMdL9A5I t962pCrr94siD4SkdFCnvd+2RCP1zqUfSsCnbabA2ejgyjWICgjh2QRw9auN4GvX Pc/sIF/Aks+eViu99KeM9Y5Xo80lRKhGx9r4BBP9NnR2+6kJg4BxJoglneVHw5te tpjFpHIhanKf+Agm+bwdl4TfPQt8njfI9HOaxJgQak07w0eNo95ugx4Iqe2sO0ii KAO2EqIcjsYQNozo3TCxM9nXlAp1anU7jFX38WDL03ImuuqW5X4lawGPON5Jsx9Y ofDkBg9shYdlfYR1iB3S -----END CERTIFICATE-----Generated at Thu Jul 23 22:58:54 2026 by rpki-client